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ABSTRACT 

DiagrioaiBfr using Expert sys-t^mst has b€reciKu& fS3ctr finely popular 
nowadays. A variety of inethods have been proposed by many researchers 
to develop intelligent diagnosis techniques using knowledge about the 
structure and behavior of a system. One of the many ways to represent 
this knowledge is the ^Fault Tree^ representation. Though mostly used 
for reliability assessment* the fault trees represent the cause effect 
relationship between the symptoms and the causes in a structured 
manner and at the same time provide data for probabilistic analyses. 

For most practical systems* where a set of symptoms point to a large 
number of faults* an uncertainty exists about the occurrence of a 
particular fault. Diagnosis* using fault trees* attempts to use the 
logical formulation representing the symptom - cause relationship and 
couples it with probabilistic techniques to diagnose a fault* when an 
uncertainty exists about its occurrence. 

In the present case* the fault tree has been constructed for the 
Electromechani cal Shutdown Rod system of CANDU reactors and for some 
selected problems associated with the IBM PC and the search strategy 
has been tested using these fault trees. The results show that in most 
cases where occurrence of faults is guided by probability of 
occurrence of that fault* probabilistic techniques can reduce the 
number of searches required to diagnose a faultCwhen some uncertainty 
exists about its occur renceZ) greatly from what would have been 
required by an exhaustive approach. 

For testing the effectiveness of the diagnosis strategy in the case 
of faults associated with the electromechanical shutdowri rod system of 
CANIXJ reactors* a simulated version of the system was used. The 
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simul&'tor was davaiopad using propar'tias of signal flow graphs. Tho 
lasts for PC fault diagnosis have baan carriad out on an IBM 
compatibla PC/XT having known problams. An interface has also baan 
davalopad to anabla tha usar to davalop tha fault traa in an 


intaractiva mannar. 
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CHAPTER ONE 
INTRODUCTION 

Any Tunctionail will have a cert-ain , desired or required 

pserf ormance speciTi cat-ion and a f^ailure is said t-o have occurred if 
it fails to operate in the desired manner. This project attempts to 
diagnose faults using failure rates or reliability data and uses a 
MYCINE3] like uncertainty handling technique. 

A program has been developed to simulate faults for 
electromechanical systems and it can simulate faults which produce 
changes in the steady state behavior of such systems. The EMSR 
C Electromechanical Shutdown Rod:>system for CANDU reactors has been 
simulated with it and its behavior has been simulated under normal 
and faulted conditions using the above program and the system 
response has been used in fault diagnosis using the reliability 
data available for the CANDU EMSR system through the diagnosis 
software. The diagnosis strategy has also been applied to some 
selected problems associated with IBM personal computers. 


1.1 FAULT AND FAULT TYPES 

Failure im:>des for most systems » electronic systems in particular 
can be classified into two broad categoriesC S3 : - 

Ca!>Through drift failures: - Due to gradual degradation faults occur 
when a certain threshold value is crossed. A typical example is the 
longevity problem of a rechargable battery* where the internal 
resistance increases in direct proportion to the time the load is 



applied and recovers at, a rat,e equal t,o one half of this value. For 
such a syBt,ein»a failure Is said to have occurred when the internal 
resistance change crosses a value of 4.00 ohms. 

Cb!>Chance failure or catastrophic failure: - Such a failure occurs 
at random within the op>erational time of an equipment and before 
wear becomes pre-dominant . Typical examples are shorted electron 
tubes and wire breakages. In this case>the lifetime of the component 
may be represented by a random variable T.for which the survival 
f unct i on vC tZ> 1 1 3 is def i ned as : - 

vCti = p <T>t> 

where p<T>t> is the probability that a compionent has a failure at a 
time after t. 

If the above hypothesis is accepted » then the probability that a 
component has a failure at a time earlier than t is: - 

p CtXT < t> = 1 - v»Ct3 = ^t:> 

^ t Z> is cal 1 ed i. he di s-Lr i buti on f unct i on and vC t is cal 1 ed . the 
complementary distribution function. 

Survival functions are broadly classified into three types as 
followsCl 3 : - 

Ca!)Type I. the random variable T representing the lifetime of a 
compionent is a discrete variable. The survival function is a step 
function. 

CbDType 1 1 a. The random variable T takes its values in [OtOZ) and 
its distribution function ^tZ) and survival function x>CtD are piece 
wise continuous for all t and ^tZ> and vCt^ admit a derivative in 
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the interval where they are defined. 

CcDType lib. The random variable T takes its values in [oi.O] and 
the corresponding distribution function 4CO and the survival 
function vCtD are piece wise continuous and make at least one Jump. 

The survival Law defined by a Rate Deterioration is applicable in 
case lla and is mostly used. 

l.a DIAGNOSIS: DETERMINISTIC & NON DETERMINISTIC MOIffiLS 

C a!) Deterministic model 

Let S = Cs^,s^. s^, s^3 represent a finite set of symptoms. 

Let F= Cf .f .f f 3 represent a finite set of faults. 

1 2 d m 

If each of the faults f » f »f > f produce sets of 

observable sf »sf »sf sf where each sf.e S^and there exist a 

12 2 m ^ 

mapping function CjCfI> for each f, which maps the corresponding sf^ 
onto F, then each of the faults can be uniquely determined and the 
model is deterministic. 

CbZ>Non-deter mini Stic model 

All Information needed to diagnose a fault is rarely available. A 
variety of techniques for handling incomplete information within 
computer programs have been proposed. Some examples of such 
reasoning techni quest 43 are as follows: - 

CiDNbn*>mono tonic reasoning: Here conclusions are defusible and so 
can be deleted in the on-going reasoning to prove or disprove a 


parti cul ar di agnosi s . 



CiiDProbabills'tic reasoning: This technique is used to represent 
likely but uncertain inferences. 

CliiDTechniques using concept of belief spaces which allow 
representation of nested models of sets of beliefs. 


1.3 REASONING BASXID DIAGNOSIS TECHNIOUES. 

Most reasoning based diagnosis techniques use the Fault-tree 
method. The fault-tree reconstructs the fault from the failure of 
basic components using binary logic. The essential steps involved in 
a fault tree construct! onC 53 are:- 

Ci;> Definition of the TOP event. According to standard fault -tree 
terminology* the TOP event is the event whose probability of 
occurrence is desired. The definition of TOP event is in terms of 
system hardware. For diagnosis pur poses, the TOP event is the root of 
the AND-OR tree representing the fault-tree. 

Cii^Deflnltion of a set of INTERMEDIATE EVENTS. According to 
fault-tree terminology, INTERMEDIATE EVENTS are those events vrfnieh 
can cause TOP event either individually, or in some mixed 
mode. Their relation to the TOP event is defined by boolean 
operators AND and CS5. For diagnosis pur poses, these are used as the 
symptoms . 

CiiiDDeflnition of a set of BASIC EVENTS. Each intermediate event is 
to be treated as TOP events and stepCii!! is repeated till a set of 
BASIC EVENTS is obtained. These are events defining failures of such 
compionents which needs no further development for analysis 
purposes. Basic events are the leaves of the fault— tree and 



D 

reliabilit/y or failure data for such events is either available or 
it has to be collected for these nodes. 

CivD Editing the Fault-tree so constructed to avoid 
omissions i, logical discrepancies and repetitions. 

It is to be noted that fault-trees for components which fail in 
more than one mode are separately constructed and substituted at 
appropriate positions in the system fault-tree. 

The fault-tree method is a versatile method for analyzing complex 
systems. Some of the advantages of fault-tree analysis are:- 
Ca!> Directing the analyst to diagnose failures in a deductive way. 

CW Pointing out the important aspects for the failure of interest. 

CcD Providing options for qualitative or quantitative system 
reliability analysis. 

CdD All owing the analyst to concentrate on a particular system at a 
time. 

Table. 1.1 is a representation of a few noteworthy programs 
developed in the last twenty years for fault— tree analysis. They 
have been categorized into a few groups. Group one consists of 
fault-tree construction programs. Groups two*three and four are the 
analysis programs. The analysis programs may be divided into two 
general types viz. those which directly produce numerical 
resultsC group four 2) and those which first qualitatively and then 
quantitativelyC group three!) analyze the logic system. 
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Table 1.1 

A few noteworthy conqjuter programs related to fault -trees 

CID Fault Tree ConEtruetion programs 
I>r af tC Fuss el 1 , 1 ©73!) 

C2!) Programs finding minimal cut setstT] 

PrepC Vesely.lOyO] 

C35 Numerical evaluation programs 
KITn.KITT2CVese\^ v 16745 
C45 Direct Evaluation programs 
SAMPLECWash 14005 

1.4 SURVEY OF EXISTING LITERATURE. 

Diagnosis as a problem has been dealt with in a number of ways 
and in a wide variety of realms ranging from medical diagnosis to 
trouble-shooting in personal conq:>utersCll ] . A generalized approach 
has been put forward by Raymond Reiter .Johan de Kleer and Daniel 
G. BobrowC 10] . In the method of diagnosis suggested by them the 
system has to be described in a suitable logieC preferably First 
Order 5 and uses nonmonotonic reasoning techni ques . The method 
accommodates diagnostic reasoning in a wide variety of practical 
settings . Including digital and analog circuits, medicine and 
database updates. 

Some useful diagnosis techniques are available in the field of 
medical di agnosi s . One such program is the MYCINE33 using inexact 
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r«Fa»oril ng in ‘the domain at uncertain knowledge. Another example is 
the TEIRESIASC43 which provides a way Tor doctors to interact with 
MYCIN. 

Diagnosis has also been attempted using system description in a 
variety of ways. Accordingly* a large number at programs have been 
developed which are dedicate to representing the system 
description. For example DRAFTC63 is a fault-tree construction 
program which proposes the component failure transfer function 
approach. The component failure transfer functions are obtained from 
a system independent analysis of every component appearing in the 
system for which the fault -tree is to be constructed. However * most 
of the programs associated with fault-trees deal with 

quantif ication of the fault tree for reliability estimation 
purposes and they are mostly based on Vesely^s Kinetic Tree 
Theory. For diagnosis purposes*the fault-tree is treated as an 
AND-C^ tree and can be used for diagnosis purposes. One such attempt 
has been made by R.DavisCS3 where a diagnostic method using 

structure and behavior has been put forward and J de KleerC03 in an 
attempt to diagnose multiple faults, 

l.S.AN OVERVIEW OF THE DIAGNOSIS METHOD PROPOSED 

In the present case* diagnosis is done by traversing the 
fault-tree of the system which is an AND-OR search tree starting at 
the TOP event. The search is a three tier process. Using deductive 
reasoning* the set of faults which have definitely occurred and the 
set of faults which have definitely not occurred are first 
identified. The remaining sub-set of the set of all possible faults 



constitutors thr srt of Taults about which uncertainty exists. The 
uncertainty is resolved using probabilistic techniques. For this 
purpiose* probability of occurrence of a particular fault is computed 
using reliability data and the technique used is a modification of 
the medical diagnosis program MYCIN. The history of occurrence of a 
particular fault is also considered for calculating individual 
f aul t pr obabi 1 i t i es . A set of most pr obabl e f aul t s is thus 
identified. 

The third step in the traversal is based on user interrogations. A 
guided search is made over the set of most probable faults using 
deductions made earlier and also in the course of this search to 
determine which of the faults have actually occurred. This step is 
also repeated over the set of less probable faults if required. 

Fault -trees were constructed for the EMSRC Electromechanical 
Shutdown RodD system of the CANDU reactors and also for some 
aspects of the IBM personal Computer viz. problems related to Start 
up ♦Reading/Wri ting. Keyboard problems and the search strategy has 


been tested with these. 
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CHAPTER TWO 
SIMULATION C»^ FAULTS 

The simulator has been developed to study the steady-state 
behavior of faulty system and use such h>ehavior for testing the 
diagnosis algorithm.lt uses concept of transfer function and makes 
quasi steady state approximations to obtain values of outputs at 
intermediate time intervals. The formulation is as follows. 

2.1 (^AST STEADY STATE APPROXIMATIONS FOR DYNAMIC INPUTS AND THEIR 
VALIDITY. 

If a system can be described by a transfer function of the form 


a s 


n-4 

a s 


& S 
n-2 


n-2 


+2l 

o 


GCsD = 


fc)C 4-h>c +bs + 

m w-i. Tw-2 o 


a. Oph 0»then the output of such a system YCt3 I at 
o o ■ 

steady state due to an input XCt!) will be as follows: — 


Cased :> 


XCtD = AU ^Ct3 Cstep of height JO 


YCtZ) = L"VA^e::>.GCsD and 



YCO I 


lim ss. CA^s^.GCb!) 


A. Cm. ✓fcj D 
o o 


tmOL 


O 


CaseCii^ 

XC-LD = AU i . «p A ramp at sslopa A 

yc-t!) = L"‘cAy's*3. <3Cc:>. 

YCt,D I = lim B. C A/a*^. GCsD = a. 

» t«Ol 

•-♦ o 

cfiLfiaCili^ 

XCtD = AU CtZ) 

-a 

Yco = L"*C 2 . a/b 5 :>. ©cs:> 

YCO I = lim B.ca. A/s®5.GCs3 = a 

«t*Ol 

s-> o 

It, ic t,hua elaarly aaan t,hat, t,h«F sst,aady atat,® valua at, t, = oi Tor 
ramp and parabolic inpu*ts t,o bha afaova syabam ia inlTiniby but. bhe 
output has a finite value at any intermediate time instant and 
these values are computable using inverse Laplace transforms. Since 
inversion from domain to ^t* domain is a complicated process » a 

few approximations are to be made in cases CiiiD and CiiiZ) which are 


as follows: - 
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yco = AU ctD 

-a 

XCs3 = A/s 

YCsD = CA/b3.<3CbD = A<P /s + P Cs5/Cb s’" + b b”^ + +b 

A 2 m w-4 O 

where is a eonst^ant, and P^CsZ) is any polynomial in s. 

The 'term P^CsZ) may be broken down fur*ther int,o many more partial 
f*r actions and its inverse will produce the transient part at YCtZ). 
Concentrating on equationCiD and equating the coefficients of the 
corresponding powers of *s^»we have» 

P Cb -*■ b ^ ^ bD=ACas^-<“a I) 

4 w w-4 O ri ri-i O 

Equating powers of *s* from both the sides»we have^ 

P b = Aa 

4 0 O 

or » P = AC a yh D 

4 O O 


or.YCfi^ = ACa /b i.Cl/slS + P Ca^/Cb a”' + b s’""* + b 3 

o O 2 m m— 4 O 


After the initial phase»when transients die down YCtD = ACa /b 5 

o o 

describes the behavior of the output. 
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XCt3 = AU Ct3 


XCe3 = A/b® 


YCb3 = CA/e*3.GCs3 


or,yCs3 = P /s + P /s® + P Cs3/Cb s” + b + +b 3 

AS B Wi TW-A O 

Following similar analysisCas in 1.11© previous caseZ) w© have* 


P b = Aa 

AO O 


or * P = AC a yh Z> 

A O O 

again* P b -*■ P b = Aa 

AO a A A 

or >P =A. Cab — ab2> /b* 

A AO O A O 

Af-ter the initial transients die out* the output YCtZ> can be 

dascrlbad by t,ha aquallon .YCIS = Ca b — a b + Ca yti 3. t, 

iOOlO oo 

It can be seen clearly that In this case » there Is a constant 
errorCdlfl^erence between the actual and approximated outputs3 and 
this is equal in magnitude to P^ IT YCt3 is approximated fay the 
relation YCt3 = P .t.The ratio P /P . t» therefor e» defines the ratio 

2 4 2 

of error to the approximated outputs for a ramp input to the 
aforesaid system.lt is clearly seen that as the value of ^t' 
Increases » this ratio decreases. 
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c&seCllll 

XCO = AU CO 

-B 

XCb:> = 2. A^b® 

YCbD=XCb3.GCs:> = P + P /b + P ^b® + P CfiD-^Cb B*" + b s™"* + +b :> 

AS ft <4 m m— 4 O 

where and are constan’Ls and P^Cs2> is a polynomial in s. 

Following similar analysis»as in 'the previous 'two oases » we have» 

p = CiSAa h* — i^Aa h b *-'i^Aa b^ + iSAa b b Dy'Cb 

4 20 020 04 440 O 

P = 2A. Cb b - ab Dx<b 3* 

2 0 4 4 0 O 

P = 2A.Ca /b :> 
o o 

Thus af'ter the initial transients die out > the output can be 

2 

described by the equation YCtZ) = 3ACa^/b^!>t with an error equal to 
P + P t. It is evident»that unlike the previous ease>the error does 

4 2 

not remain constant but varies linearly with time. But the output 

2 

being a function of t and the error being a linear function of 
time»the ratio of error to the approximated output decreases with 
time. 
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From the above discussions it follows that for any general input of 
the form XCt!> = AU CO, the output can be approximated by the 

mmpf 

relation YCtZ) = Cn-lD!.Ca /b 3XCO Ca and b has already been 

Cp O O O 

defined^ with an error which depends on the type of the 
input. Moreover .the transient parts being neglected in all cases, the 
approximations are valid for all t> t »where t is the settling 

ft ft 

time for the system. But since simulation for normal and faulted 
states is done 

in the same frame of reference using the same set of approximations 
there will be sufficient qualitative difference between the normal 
and faiilted states to differentiate between the two states. 

2. 2. SlifULATION BASED ON SIGNAL FLOW 6KAPH MODEL. 

For simulating systems with signal flow graphs, we use the 

transmission, addition and multiplication properties of signal flow 

graphs. The numbering of the nodes follows standard 

convention. Thus, if n and n are two nodes in the signal flow graph 

«■ j 

representing two variables x.>c respsectivelyCx. ,x. may be 

L L J 

fuFiCtlc^is of "ti me » complex frequency or any other quant i ty!> » and if 
they are linked by a branch L directed from n^ to n^.*then the link 
or branch transmittance for the link L will be denoted fay A.. The 
input iiode is always designated as n^. 

Usii^ the transmission property and the multiplication properties 
of sigrsal flow graphs * a cascaded series connection of Cn - ID 
branches with transmittances described by A >A A 

12 ZB <n“i>ri 

can be replaced by a single branch of transmission function equal 
to the product of the original Cn - ID branches and 
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^ • • • • ^ wh«fcr^ X isB thei variable asaoeia'ted 

r, 4a <r*-4>ri 4 4 

at node 1 and X ±» the variable aacociated with node n. This 

fS 

property holds good f'or any two nodes n and m with only series 
cascaded branches between them. 

However ►when feedback and feed forward branches are also 

present»the series multiplication prop«9rrty cannot be used 

directly. Feed forward branches are described by transmission 

functions of the form ^ i and j i + Ifrand feedback paths 

are described by transmission functions of the form A }i>J.It is 

* 

to be noted that a branch connecting any two consecutive nodes i 
and i +1 is a feed forward path ►but we restrict our discussions to 
the classical definition of feed -for ward paths. 

In the following section»an algorithm is presented to obtain an 
expression of the form 

rt-4 

X = n A . X 

m * • v<t.-4*4> -n 

vsam 

where feedback and feed forward paths are contained between the 
nodes n and m. 

It is clearly seen that the value of can be obtained easily 

by putting s = O in the expression for GCsZ) , Therefore ► for all 
practical computing purposes* value of the quantity t>e 

obtained by treating transmission functions as real numbers rather 
than functions of complex frequency and the variables associated 
with the nodes can be treated as functions of time. The 
multiplication property is then to be applied either directly or 
after simplif ication using the algorithm proposed in the following 


section. 
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S.S.TACKLIWG FEED-BACK AND FEED-FORWARD PATHS- A HIERARCHY BASED 
METHOD 

Branches described by transmission inunctions of the form A Ij ^ 
i+lj&re either feed— back or feed-forward branches. The signal flow 
graph may contain only feed-back branches or only feed-forward 
branches or both in addition to branches describable with 
transmission functions of the form A .jj = i + 1 . . Thus there may be 
three cases which are as follows: - 

caseCiZ) Only feed-back branches are present 

Let P be an ordered set of all feed-back branches. The ordering is 
done according to the following rule: - 


#1 


If A . and A. are any two 

^ 4 4 2 2 


members of P then A succeeds 

'* 2^2 


A . if CaD J >j or Ch:) i <i Ij = J - 

l.j 4 2 42* 4 2 

4 4 


It is to be noted that condition CbZ) is merely a matter of 
convention. In such a case^the order in which the two entries are 
placed makes no difference when only feed-back branches are 
present . However » it is clearly seen from condition CbD that two 
feedback branches A. . and A. . having j s= j affect the 

t j 4 J 4 2 

4^*4 

same series branch vlz.A^^^^^ where ^ J- 
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If more than one A. .e P affect the same branch A>then the value 
of the transssjtti ftcion function A after the branch iss processed is 

given by 


1 


CA. = 

1 A 


CA :> CA 3 

< J W-1 i j o 

where CA . D is the original value of the transmission 
function before linearization and A . is defined by the following 
relation: - 


A. 


Cn A , A . 

» » k<k+l> Lj 


In calculating the value of A., the most recent values of all the 


transmission functions involved are used. 


cased 1> Only feed -for ward branches are present. 

Let 0 be an ordered set of all feed -for ward branches. The ordering 
is done according to the following hierarchy:- 



* w 


It A. a. and A are two successive Bombers of <i»theri A. . 

iTA a a a^'a 

succeeds A. . if Ca^J < J or CbD i < i Ij = J - 

1-4 "^4 '^a 4 a*'^4 "'a 

4 4 

Again»the condition Cbl) is a matter of convention and need not be 
follovi^d strictly when only feed forward branches are present in 
addition to the series branches. 

Again »if more than one A. e O modify a single series branch I 
then the modified value of the transmission function of that series 

branch after the m^^ such feed-forward branch is processed is 
defined by the following relation: - 

CA :> = CA 3 + CA .:)/A 

<j-4>j m <j-4>j m-4 uj Lj 

j-a 

where A = Cri A . D. 

ij ■ • kik^£> 

k*i. 

For m = O the value of A .is the original value of the 

series branch transmittance before linear i nation. In calculating the 
value of A the most recent values of transmi ttances of the 

branches involved are used. 

cased i±> When both feed-back and feed -for ward branches are 

present. 

In this case the processing algorithm is slightly complex. A few 


<j-4: 


definitions are proposed for tackling such operations. 
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CA^ContalniMrnt of bramchAs. A foed-back branch A is said to bo 
contained by another feed-forward branch A if i < J and 

J. > ^2 • 


Chi^Opmr-mt.±ctrt FBalT P b«» an ordi^r^d or fo^pd— ba.ck bra-nehoss and it 

ft h& an ordarad &&t of faad -for ward branches » -than opwara-tion FB 
consists of application of operations formulated in cased Z> using 
values modified by members of P only in the calculation each A.,. 

CcDOperation FF. If ft be an ordered set of feed-forward 
branches^ then operation FF consists of application of operations 
formulated in caseCiiD to all members of ft. However » in calculating 
the value of A., for a branch A . e 0»the following steps are 
involved: - 


Ci3 Demarcation of another ordered set P'£ P» each member of P* being 
contained by the feed -for ward branch in question. 

CiiZ? ^plication of opwepration FB to the set P' to obtain modified 
values. In calculating the value of A_ the modified values obtained 
through this step and those obtained in course of op^eration FF only 
are to be used. 

Finally » if m number of elements in P and m' number of elements in 


O modify a |>articular series branch A . .»then the final modified 
value of the branch transmi ttance A . will be 


<^“*>4 fi-rol 


^d^ere 


CA . , 


* CA . xCA .3 is 

m O 


obtained through operation FFand C 
obtained through ofseration FB. 
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EXAMPLE 


Let us consider the signal flow graph shown in fig. 2.1 



Fig.2»l» A signal flow graph showing feed— forward and feed-back 
branches. 

For the above graph* the feed-back branches are A and A and 

^ 6!5 €Wlr 

applying rule order in which they are to be processed is*. - 

CiDA and CiiiSA . 

as 4S4 

F*or the above graph, the feed —for ward branches are A and A and 
applying rule ;Se,the order in v^ich they are to be processed is: - 


Ci>A and Cii^A . 
av -*7 
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Operaitlori FB gives: - 


CA :> 

4S A 


CA :>/Cl - A :> where A = A .A .A .A 

■*B A i B<S tfP 7a 85 


CA 5 

B4 i 


CA DCl - A D-^Cl - A - A ^ where A = A .A .A 

*■ 4 8 2 45 55 5? 


Oper et/l on FF gi ves : ~ 


First, feed-forward branch is A 


B7 


It, contains the feedback path A 

54 

Applying operation FB on CA ],we have. 

€S4 

CA5=A +AC1- A :)/CA .A .A 15 

57 1 €t7 87 2 94 45 55 

The second feed-forward branch is A and it also modifies A 

47 57 


So. we have. 


CA :>= A +AC1-A :>/A .A .A 

57 2 57 S7 2 84 45 55 

Using modified values 


A /A . A 

47 45 55 


X - -lA .A .A .A .A .A .A .A / Cl - A - A5 

e ' 42 28 84 45 55 57 7a BP ' 4 2 

+ A .A .A .A .A .Cl - A5 / Cl - A - A :> 

42 28 87 ?B ap 2 ' 4 2 

+ A .A .A .A .A .A /Cl - A - AiSl. X 

42 28 84 47 78 ' BP ' 4 2 • 4 

vrtiich is precisely the result which Mason *s gain formula for signal 
flow graph gives. 

The above formulation has been experimented on a large number of 
graphs.However.it is quite possible that some configuration exists 
for which it fails. One disadvantage of this is the inability to 
tackle self loops. Oie great advantage of it is the ability to 
compute intermediate nodal values in cases where feed-back and/or 
feed-forward branches are also present. 



values, has been used advantageously for fault simulation. Since the 
system configuration is fixed,a fault corresponds to a change in 
the transmittance of one or more branches. The change in 
intermediate values and the terminal value serves as an indication 
of a fault when they deviate from the normal. 

2.4.. SOME Ct»<PONENTS AND THEIR REPRESENTATION AS SU6>6RAPHS 


Some of t.he oommon mechariical and electrical comp>onents mostly 
required for electromechanical systems have been modeled as 
sub graphs. These sub graphs when connected as required build up the 
signal flow graph for the entire system. However * the menu of such 
components has been purposefully kept confined to a few selected 
components only as this simulator was primarily developed to 
simulate the electro mechanical shut-down rod system for the CAMDU 
reactors which required a few selected components . The respective 
components and the sub graphs corresponding to each is as follows:- 
Ci> Motor. The motor modeled here is a dc servo motor in the 
armature controlled mode with constant field excitation. The 
variable associated with the first node is the input voltage v^. The 
second node represents the voltage across the armature after 
considering the feed-back due to the back e. m. f of the motor. The 
third node represents the armature current. The fourth node 
represents the motor torque and the fourth represents the motor 
speed. The branch tr ansmi ttances are as followsC neglecting the ^s^ 
terms^ : - 

A = 1.0 

A = 1/r where r is the armature resistance 

A = K where K is the motor torque constant 

A4 fw m 



V.-' 

^ 4 fs ~ where F is *the frictrion factor. 

A = 1.0 

Sdt 

Cthis is also Lhe e. m. f conslantZ) 

S»iC Tfi 

Not^es * The value of “the effective friction factor referre<d to the 
motor shaft can be obtained at steady state knowing the operating 
conditions of the motor. 

Cii>Roiating parts like gears and pulleys. Each rotating part like 
an assembly of two gears or an assembly of a driver and a driven 
pulley is modeled as a three node sub graph. All the four nodes 
represent speed. The branch transmi ttances are as follows: - 

^ 4.2 ^ ® where g is the ratio of driven shaft speed 
and driving shaft speed. 

A == 1.0 

For simulating faults in the gear /pul ley assembly* the value of g 
is altered and for simulating faults associated with the driven 
shaft only* the value of A^^ is altered. For pulleys it is further 
assumed that no slipping occurs. 

Citi> thr^txauA drum is modeled as a two node sub graph with the 
transmission function A =1.0. 

4.2 

Civ> Controllers. All controllers are modeled as proportional 

devices. Elaeh controller is represented by a two node sub graph. The 

first node and the second node both represent vol tages . Vol tage 

signal can be fed into the first node from any other node in the 

system signal flow graph. The branch transmi ttances A^^ = where 

K is the controller gain. 

p 

Cv> Potentiometers. A potenti ometer is modeled as a two node sub 
graph with the transmi ttance A^^ = K*where K is the potentiometer 


ratio. 
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CvlJNC and NO conlact.ors. A normally closed NC contractor is 
represented by a two-node sub graph with A =1 and a normally 
open contactor is represented by a two-node sub graph having A^^ = 
O initially. The change in the value of the transmi ttances for 
contactors are brought about by the relay which acts on that 
contactor . Rel ays are modeled in the same ways as faults. A relay or 
a fault keeps record of two things viz. the node in the graph which 
they affect and the time instantCw. r . t the simulator clocks at 
which they occur. The simulator also permits simulation of processes 
involving timed operation of relays. 

Cvli^Triggers. A typical escample of this is a comparator or a 
magnetic clutch. This is also modeled as a two node sub graph. The 
transmittance A^^ swings from one predetermined value to another 
predetermined value as soon as the value of the variable associated 
with the first node crosses a certain predetermined threshold. 

Feedback and feed-forward paths can only be modelled as sealers 
or potentl ometer s . 

It is to be noted that the numbering of nodes for each sub graph 
mentioned above is being done w. r.t to the sub graph only. Fig. 2.1, 
shows the sub graph associated with a motor as an example. 




2. B. SIMULATION OF EMSR SYSTEM FOR CANDU REACTORS. 


The reactor BhutdovArt mechartlsm for CANDU reactors consists of two 
shutdown systems viz. the EMSRC Electro mechanical shutdown rodZ> and 
the LPRCLiquid poison shutdown rod!) mechani sms . After an abnormality 
worthy of reactor shutdown is detected by the monitoring 
instruments, the shutdown rod is expected to insert in the core 
completely in 2 seconds including the time required to communicate 
failure through instrument channels. 

Fig. 4.1 shows the schematic representation of a single EMSR. From 
reactor physics considerations 12 such rods are required to 
introduce sufficient poison into the core in order to stop the 
fission chain reaction. There are 14 EMSRs triggered by 7 pairs of 
scram signal circuits. 

The operation of a single EMSR is as follows. On receiving the 
scram signal, the rotating magnetic clutch MCR under the force of 
the release spring SR is disengaged. Under the weight of the 
shutdown rod, the cable on the drum unwinds freely and is guided by 
the pulleys and P^ and the guide tube. The fall of the rod is 
impeded by the friction between the gears .between shafts and 
bearings and viscous drag due to moderator. To overcome the effect 
of this impeding factors, acceleration spring SPRl is provided. Under 
normal condition the rod is pulled against SPRl so that on release 
a very high initial velocity is achieved. At the end of the Journey, 
the rod comes to rest on a support SP and to avoid vibrations j 
second spring SPR2 is provided. 

The EMSR system is said to operate successfully, if 12 out of !■ 
rods reach the end support SP in guide tube within 2 secs. Eecaus 
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rod^ rttAcH O'rici support, SP In guldii^ t#uk>S' wit/Hln S S€pcb. Bfifcaus^ 

the rods a.re triggered in pair by 7 scram signal circuits* failure 
of two or more instrument channel out of 7 or failure of" 3 out of 
14 rods to Insert completely in the core is considered as EMSR 
failure. 

However * there is one very vital point which is to be accounted 
for. The spring is an active device. iSo far in the simulation 
algorithm it is assumed that the driving function is always applied 
at the input node. In this case^as soon as the magnetic clutch 
releases* the input terminal of the spring replaces input node and 
acts as the pseudo input node. A ramp approximation is made for the 
motion of the rod through the moderator . However * the actual 
trajectory of the moderator is something quite different. 

For simulation purposes*the signal flow graph of the system apart 
from the spring loaded shutdown rod is constructed using the 
sub graphs for each and the spring -loaded shutdown rod is treated as 
a separate entity as a whole. The input terminal of the spring*is 
connected to some rotating member ► in this case the pulley.lt 
is to be noted that the angular displacement of the rotating member 
depends on the vertical displacement of the rod and so the 
magnitude of the pseudo input node driving function can be 
computed. 

Let X CtD be the nodal value at the spring output and let X.CtiS = 
i *■ 

K.t rather than KdCtZ). 

Let XCt:> be the displacement of the rod from the initial 
J 

position. For the present approximation X CtD = XCtD. 

V J 

Let X Ct5 = RX Ct5 be the reactivity produced in milli K by the 
k j 

displacement XCtD at any instant t.R is assumed to be constant. 
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It/ is t^o not/epd t/hait/ t/he X^Ct/2> is n&gaLt/ivi^ IT or a. posit/iva 

X C t/2) . X C t/Z) Is posit/iva* Tor mot/iori of t/he shut/down rod int/O trhe 
J J 

core. 

If *L* be the displacement of the rod at t = t .where t is the 

t t 

time of fall required and be the value of X Ct:> at t = t ,we can 

f k f 

define 6X Ct^D = and 6X Ct!) = p /t . 

j f k t 

Approximat/ing X Ct 3 = X.Ct. 3 6X Ct:> where X Ct !)== L»we 

^ ^ j j r. ^ 

haveX Cl = X Ct, Z) + 6X CtZ>» and X Ct Z> = p. n beimg the 

k v k L-J. k k rt ^ 

number of time steps considered and XCtZ) s=XCtZ> =0. 

j O k O 

Considering a single group of delayed neutron precursor only»the 
neutron population at any time t following a step change in 
reactivity p^from steady state* is given by the equation 
nCtZ) = n C A.expCotZ) - B.expCottZ)] where A»B*o and ot are 

O t 2 £ 2 

dafinod in the following way: - 

A = - pD; 

B = py'Cft - pD ; 
oi^ = \pyCft - pD ; 

= Cp - 

and 

ft fraction of delayed neutrons produced during fission 

compared to the total C del ayed + prompt!) . Typically* /9 = O. OOS5. 
p «♦ magnitude of the step change in reactivity. 

X mean ecay rate of the delayed neutron pr ecur or s, typically 
X = O. OS see"*'. 

A neutron production time, typically 0.1 ms. 
n^ ii* neutron population at steady state. 

The reactivity change during the shutdown process can be 



conBi d«rr«pd a.s a. B’tap changa it 'tha t#ima 'tak<^n by 'tha rod t/O roach 

the end support is very sufual 1 . Si nee the time is 

appreciableCapproximately 2 see.!) this step approximation is not 
valid. The reactivity* however remains constant af’ter the rod 
reaches the end support and rests there. The actual variation of the 
reactivity during shutdown is governed by the motion of the rod 
itself- For the sake of our convenience* the reactivity change has 

been approximated as a ramp function during the journey of the rod 

through the moderator. To calculate the neutron populations at 
different time instants during the journey of the rod through the 
moder at or * the f ol owi ng for mul a i s appl i ed : - 
nCt D = nCt D. t A' .expCot ' tD - B' . expCc* ' tZ) 3 

x . 1.-1 1 2 

where A' = - Xj^Ct^DZ); 

B' = X Ct Z>/C/9 - X Ct Z>Z) 

k i ' k t 

ot ' « x.x ct « X ct z>:> 

1 k V k 1. 

d ' * CX Ct Z> - /9Z>/A 

2 k i 

The above formulation is not strictly valid since* the momenta 
step change in reactivity is introduced into a reactor at steady 
state* a prompt jump in neutron population occurs. But in the 
present case»the reactivity changr is on the negative side. So for 
small time step and small value of time step this approximation 
gives fairly satisfactory results. Moreover * since both the normal 
and the simulated responses are calculated under the same 
approximations* there is sufficient qualitative difference between 
the response in the normal state and that in the faulty state to 
enable detection of faults. The values of and *t^* are to be 

provided by the user when the nuclear interface is built. 
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CHAPTER THREE 
THE DIAGNOSIE ALGORITHM 

Diagnocie ic bacttd on a caarch of LKa saysLam TaulL'-Lrae 
which is raprefsantad by an AND-OR trae and is entered by the 
user in the f’orm of a set of Boolean equations each 
representing the causal relationship between a fault and its 
causes. The entries are in the Sum of Terms form where the left 
hand side represents some intermediate eventCsymptonO and the 
right hand side is an e>cpression involving disjunction of a 
number of terms * each term being an event or a conjunction of 
two or more events. The traversal algorithm is a three tier 
process starting with the TOP event as the root and gives as 
its output the set of faults which have occurred. The first step 
is based on purely deductive reasoning. The second step involves 
MYCIN like uncertainty handling techniques to demarcate a set 
of most probable faults from the set of all possible faults 
about whi ch some ambi gui ty exi st . The t hi r d step i s based on 
user interrogations and is used to identify the faults which 
have definitely occurred. 

3.1 KHDWLEDGE REPRESENTATION 

The knowledge is represented in the form of an AND-OR 
tree. The TOP event is the root of the tree. Each node in the 
tree has at least two attributes associated with it depending 
on whether it represents an INTERMEDIATE EVENT or a BASIC 
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EVENT. Th«-ser are:- 

C aZ> I NSTRUMENTATI OM STATUS if^ i’t is an i n't er mediate event. It 
denotes whether or not there is an instrumented fault indicator 
for the intermediate event in question. If there is an 
instrumented fault indicator * then it is possible to know 
definitely the state of the intermediate event in question, else 
it may or may not be possible to check for the state of the 
event i n quest! on . 

Cb:>PKOB ABILITY OF OCCURRENCE if it is a basic event. This 
attribute is not static for a node and has to be computed. 
Cc30PEN or CLOSED attribute to denote whether the node has to 
be checkedCwhen it is still OPEN!:) or notCwhen it is CLOSED3 . A 
node is said to be OPEN till no query has been made about the 
status of the event represented by it. 

Thus, for two nodes il and j representing two events S. and S^, 
respectively and with a link L. ,the direction being from node 
t to node J , the semanti c si gni f i cance i s : - 

if S occurs then there is a probability P . that S. is the 
i '-J J 

cause for it. 

This is similar to MYCIN rules. But a set of static rules 
cannot be used in this case as the aforesaid probability P^^ 
is dynamic and has to be normalized over the set of possible 
faults having some ambiguity since the probability of 
occurrence of a fault depends on the equivalent failure rate of 
the components associated with it, the time of operation, and of 
course the conditions associated with it can vary widely. Hence 
nor mal i zat i on over a f i ni te domai n is necessar y . Another 
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advantage of this representation, which is quite obvious 
front the first, is the ability to use the same graph repeatedly 
and computing the probability values as and when required 
rather than forming a fresh set of rules each time as required 
by a static set of representations like MY Cl N. For example, even 
after a certain fault has occurred, a static set of rules will 
assign the same probability of occurrence to it for the same 
set of symptoms, though in real life the probability of 
occurrence of the fault in the near future is much lower. In 
such a case, in order to overcome this problem, a fresh set of 
probabilities are to be assigned to each fault and a new set of 
rules is to be formulated. 

However, for implementation is done by predicates to store 
information about causal relationships between the faults and 
the symptoms. 

Let T TOP event; 

Let S = [s, s. s s 3 denote the set of all 

A s a n 

intermediate events. 

Let E = Ce, e. e e3 denote the set of all 

42 a r. 

possible basic events. 

In the light of the above discussions, the following 
predicates are defined: - 

Ci5 can occ frstCs ,sE 3 where sis any intermediate event and 

— — i V t- 

sE. e pCE:) where pCED is the power set of E. 
Cii3possible_frst_ifCE^,sSO where E^ is any basic event and 
sS^ e pCS>,pCS) being a power set of S. 

The semantic significance of the above two predicates is 
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far ought out fay the following rules: — 

C13ca.n_oce_frstCs .sE !>A;ToceursCE 5 C"*c»ecursCe 3 | V e in 

'• J ' J 

sE 

L 

The rule s'La.'tes ‘that it a c:er*tain inlermediatre event, is no^t 
seen t,hen none of the basic events causing it could have 


occurred. 


C£Dpossible_f rst_ifCe »sS!!) A CoccursCe 2)!> C occur sC s !> IVs in 

>) * J 

ss :> 

t 

The second rule states that if any basic event occurs » then 


all the intermediate events caused by it occur. 


As an example » let us consider the following formulations 


defining the cause effect relationship between a set of 


symptomsC inter mediate eventsZJ s^»s^ and s^ and a set of 
causesC basic events!) e »e »e »e and e . 

i 2 S ^ 5 


Exan^l el. 


s = e e + e 

A 4. 2 fi 


s = e e 

2 3 4 

s = e + e 

The corresponding predicates will be: - 


can occ frstCs »Ce »e >0 3D 

— — 112 3 

can occ frstCs »[e^»e 3D 
can occ frstCs »[e 3D 

— — 3 15 

possifale_f rs'L_if'Ce^i. ^ ^ 

possible_frst_ifCe^, Cs^35 

possifale_f rs'L_ifCe^* Cs^»s^3!) 

possi bl e_f rst_i f C . C s^l :> 



34 


possible frst ifCe ,[s 3:5 
~ ~ B a 

The formulation of the above rules require that the each 
boolean relationship representing some cause-effect 
relationship is a function involving disjunction of a set of 
basic events only. This is the simplest ease and it is the 
desired form of representation For handling cases involving 
disjunction and/or conjunction of basic and/or intermediate 
events some transformations are necessary. 

The user , however » enters the fault-tree in the form of a set 
of boolean equations. Two cases have been dealt with 
separately. These are as follows: - 

caseCaD.A set of intermediate events is the cause for another 
intermediate event s and the logical formulation is 
eonsi stent . 

A predicate causesCi nter mediate event » set of basic events, set 
of intermediate events!) is defined to mean that the first 
argument is caused by any basic event in the second or by any 
intermediate event in the third. 

The following transformation rules may be applied in this 
case to transform the formulation to a form which can be 
expressed with the help of the two predicates can_occ_frst and 
posslble_frst_if : - 

;WLcausesCs ,sE ,sS.!) z> CV s e sScausesCs ,sE , [s 3!)I). 

VVl. j*- >-«-j 

^iiScausesCs ,sE , Cs.]I>Alcan_occ_frstCs.,sE DD z> 
i 1. j J J 

Ccan occ frstCs ,bE, I sE : = sE U sED. 

— — V k • k L J 

The truth table in the simplest form can be obtained by 
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applying transformation rules m. and to elements of S 

whenever r equi r ed . 

ciftsseC • XKi c Is a more qenerAil cal&& where t^he brooXe&n eqii«st.t^l on 
involving "LHe ea-tisfiil rel a'tionship he'Lween "Lhe sympt/Onis e.nd "the 
catuses involves di s juncLi on a.nd/or conjunct. ion of^ int.ermediaLtre 
and/or basic events. A typical formulation in the clausal form 
may be considered. 



K. a ft r. 


where s, > s, can be a basic event or an intermediate event, 
k l 

In this ease the following set of formulations are attempted to 
resolve the conjunctions: - 
Tr ansf or mat i on . 

The aforesaid clausal formulation is to be rewritten as:* 

* 

S, : - S . 

1. 

S. : * S . 

i. 

V p in [Itml s b*. 

kp 

V q in 11 ,n3 b : - b* . 

iq I 
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Trains Tor 1X1311,1 on 

Each of the events s^* s^ are to be treated as intermediate 
events. They must have instrumented indicators to determine 

lit itt 

their Btate uni quel y. The events s ,s are to be treated as 

k I 

basic events of Zero equivalent failure rate to avoid traversal 
of closed nodes. Transformation rules ^ & MZ cited in caseCaD 
are to be applied now and the truth table in the desired form 
is to be obtained and standard predicates defined may be used. 

It is clearly seen that the conjunctions are very costly from 
instrumentation point of view. 

The transformations 2c ;litZ can be applied to any finite 

number conjunctions associated with s^. 

EXAMPLE 2. 

s = a. b + c 

i 

s = d 

St 

s = a + e 

SI 

this can be represented by an alternative formulation which 
is not exactly logically equivalent but produces approximately 
the same trajectory. 

* 

Si = s + c 

Ht 

a = s 


b = s 


s = d 


a 


The basic events originally represented by a and b should be 


treated as i 


nter mediate events »s should be treated as a basic 
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a.nd "Lhefre? should ins'Lrument.e'd f^aultr iridicfiLtrors f^or 

both a and b. 

The logical inequivalence lies in the fact that the above 
formulat,ion indica'tfes ■Lha'L s cannot, occur il' bot-h a amd b do 
not, occur, which is quite true, but fails to utilise the fact 
that if £ occurs then both a and b must have 
occurred. However » since s is not checked at all» the second 
implication has no significance. 

3.2 SEARCH BASED ON DEDUCTIVE REASONING 

Let S be set of all intermediate events which have instrumented 
<1 

fault indicators; 

Let S := £ - S be set of all intermediate events which do not 
b a 

have instrumented fault indicators; 

It is to be noted that all events in £ can be checked by the 

O 

user when required and three answers *^yes*»*no* and “^don^t 
know* are possible to such a query. 

Let S e S be set of intermediate events which have occurred; 
d a. 

Therefore ►S := S - S is set of intermediate events which have 
^ a, d 

not occurred. 

The following routines are then used to separate out the set 
of faults which are definitely known to have occurred and the 
set of faults which are definitely known to have not 
occurred. The remaining subset of E is the set of faults about 

c 

which some ambiguity exists. 


Routi ne . 
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V 5B in S eAn_oce_3rrBtCB. ,bE.D CE.: = E - bE where E is 

t ♦ Lit t-4 t t 

the set of possible basic events at the time of processing the 

intermediate event in S and it is initialized to E. This 

rule states that the causes corresponding to each intermediate 

event in can be deleted from the set of possible faults. The 

predicates of the form can_pce_frstCintermediate events set of 

basic event sZ> are to be updated , and sE. is to be subtracted 

from all these using the following rule for all elements in 

Vs 4« S » can occ frstCs *sEZ> o Ccan occ_frstCs »sE' .2) 

^ d j j J 4 

where sE' : = sE - E 
4 4 

Routine 

V sin S3 possible frst ifCe bCs3Z)i> CE : = E. + [e 32> where 

\,d — — d d k 

i t— 4 

e « E» and E is the set of basic events which are definitely 
k d 

t 

known to have occurred at the time of processing the 
t ‘\n-berinediate event in and it is initialized to a null 

set. 

This rule states»if a particular Intermediate event occurs 

and if it can be caused by one particular basic event only, then 

that basic event definitely occurs. 

The set E: = E-CE + E3be the set of faults about which 
b •ad 

some ambiguity exists E and E^ being the sets of faults which 
are definitely known to be absent and the set of faults which 
are definitely known to be present respectively and they are 
obtained through routine #1 and ^.Thus, for example 1. if 
S =Cs ,s 3 and s Es^3 , then E s \ 

» Co 3 

B 



3.3 FORMATION OF A SET OF MOST PROBABLE FAULTS 


If E ic not A null «eft»th«rn further reduction of E 

b ^ 

may be poccible u«ing probabilistic techni ques . The method 
followed in this case is a modification of MYCIN. 

However » the major deviation from MYCIN lies in the fact that 
symptoms in this case provide only positive inferences about 
the occurrence of faults » unlike MYCIN in which the rules are 
framed in such a manner that , particular symptom can add to 
belief or disbelief about a particular 

hypothesis. Accor dingly» it computes only the belief measure for 
a particular fault when the set of symptoms dictate that the 
fault is possible. Computing disbelief is not required because 
the method is designed to be used on a set of faults all of 
v^ich are possible for a given set of symptoms. 

V e in E » 

i. b 

lot pC® D = 1.0/^ donoto the apparent probability of occur rente 
qT a particular f'ault e considering equal probability f‘or all 
i^aults»n being the number of elements in E^; 

-X T 

let pCe D = 1 - e denote the actual probability of of 

1. CL 

occurrence of basic event e.»X. being the failure rate 

X. I. 

associated with basic event e^ and T being the corresponding 

time of opieration for the components associated with it; 

let pCe |TZ> denote the normalized probability of occurrence of 
i • 

the event e. if the TCP event T occurs. 
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In the computation of pCe^:>^»v/e assume the following; - 

Ci:>A fault is a permanent state and can only be removed 

through repairs and/or replacements and not by itself. 

C 23 Comporients associated with a fault get a fresh life once a 
particular fault is rremoved either through repair or through 
component r epl aeement . 

The value of the normalized probability pCe^|T3 for a basic 
event e^e E^, can be computed using the following relation: - 

pCe |T3 =pCe^3 /C J] pCej^3^3 where m is the number of elements 
in E 

o - 

The values of pCe |T3 and pCe 3 thus obtained are used in the 

V * 1. OL 

computation of a certainty factor to indicate whether it is 
worth searching for the particular basic event or not. 

The certainty factor is defined in the following way: - 
C. F = 1 if pCe.3 =1; — 

X. 

otherwise C. F = pCe^jT3 - pCe^3. 

The C.F is computed for. all e^ in E^ basic events with C. F< O 
are deleted from the set E^. Thus ~ represents the 

set of most possible faults »E being the subset of less probable 
faults. E defines the domain of search for the nesct tier. 

W 

2.4 ELIMINATICM BY USER IMTERROGATION. 

Let S define the initial set of intermediate^wnts a^^ut 
which no conclusion can be drawn. Elements may be added to it or 



delft'tfi'Ci from it, in course of t,he int,errogat,ions. It, is 
initialized to the null set. 

Let define the initial set of basic events about which no 
conclusion can be drawn.lt is initialized to a null set. 

Let E define the set of OPEN basic events and it is 

O 

initlali 2 «pd i^o A baaic «*v«!ntCor inor«» api&cifically Ihe node 
represen*ting 11.3 la said t.o be OPEN IJT it. is not. a inember ctt E 

a. 

or E or E . 

d K 

Lei S def i ne the set of OPEN i nier medi ate events . An 

o 

Intermediate event is said to be OPEN if it is not a member of 
S or S or S . 

d « K 

V e in E ,the following sequence of operations is performed: * 

i. w 

Ci3 test for occurrence of e : - 

L 

Ce in E 3 A: possible frst ifCe ,sS53A:s fc S jV s in sS3. 

L O — J e*4 i. 

While testing the individual s e sS.^the following are to be 

J 1 . 

considered: — 

Ca3s is to be tested if s e S , 
a J ^ 

Cb3if occursCs 3 then S := S + [s3. 

4 -d d j 

Ce3if not occur sCs 3 then S:=S + Cs]» rule ^ cited i 

j A • j 

fi«.ction 3,2 is to be applied on s . 

4 

Cd5 if it cannot be concluded whether occur bCbD or not 

V 

occuraCs D then S : = S + ts 3. 

4 X K 4 

CiiZ) after testing e. » any one of the following is to be done:- 

i. 

CaZ> if occur bC e and poBBible_frBt_if Ce^, sS^Z) 

S : = S + bS , S : = S - aS. .E := E + Ce 3. 

d d Lkk d d V 

CbD if not occursCE.Ii then E : = E + Ee 3. 

i <x ^ ^ 
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Ce>if it cannot, bo dotorminod whothor occur aCE D or not 

i 

oeeuraCE.Z) thon E := E + Co ]. 

L K M L 

If after testing all the elements of E , E = [] then less 

V d 

probable faults are to be considered. For this purpose»E is 
reinitialized to and the sequence of operations formulated 
in Ci5 and CiiD are to be performed again. 

3.B MERITS AND DEMERITS OF THE STRATEGY. 

It is evident from the above discussions that the strategy 
gives boat results in cases where the fault-tree can be 
represented by an OR graph only. AND terms are difficult to 
tackle in this case from instrumentation point of 
view. Moreover , if any boolean equation describing the causal 
relationship between a symptom and its causes contains AND 
term on its RHS,then instrumentation is required for all the 
variables Celt her basic or intermediate events!!) that are 
involved in that term. Furthermore, the strategy fails to use the 
knowledge represented by unary negation. This is because of the 
fact that unary negation cannot be represented by AND or OR 
functions. In fact , representation of unary negation in an ANE>— OR 
graph requires an additional operator. However, for MYCIN like 
diagnosis problems, the fault trees encountered can be 
represented by a graph having OR links only, each link being 
directed from the effect to the cause. Negations and 
conjunctions are rarely encountered except for systems like 
purely digital systems. Even for such systems, MYCIN like set of 



^5 


rules can describe the cause-effect relationship between 
symptoms and the causes quite effectively but' representing 
negation requires concept of Mis-belief also. Typicaily^a 
combination o.f symptomCsZ) point to a set of faults each with a 
certain probability. This method is therefore usable for systems 
whose fault -tree can be represented by simple MYCIN like rules. 

The formulation suggested in section 3.1 for dealing with the 
AND entries » though not exactly logically equi val ent » does not 
give rise to logical inconsistency and does not search for the 
occurrence of a CLOSED node. For dealing with highly formal 
systems te.g diagnosis of ^ stuck at O* or * stuck at 
faults^ probabilistic techniques are not required and faults can 
be detected using deductive reasoning only. 
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CHAPTER FOUR 

CASE STUDY ONE - EMSR SYSTEM OF CANDU REACTORS 

The reactor shut down system for CANDU reactors consists of two 
systems viz. the Electromechanical Shutdown RodCEMSR3 and the 
Liquid Poison RodCLPRI) shutdown system. In this ehapifer » the 
fault-tree of the CANDU EMSR system is presented and the expected 
performance of the diagnosis algorithm for diagnosing faults in the 
aforesaid system has been put forward. 

4.1 FAULT TREE FOR EMSR SYSTEM. 

The EMSR systeiri for CANDU reactors has been discussed in Chapter- 
two. Fig. 4.1 is the schematic representati on of a single electro 
mechanical shutdown rod. system. The EMSR system is said to operate 
successfully if twelve out of fourteen rods reach the end support 
SP in the guide tube within two seconds and rest on it. Because rods 
are triggered in pairs by seven scram signal circuits> failure of 
two or more instrument channels of the seven or failure of three 
out of fourteen rods to insert completely in the core without 
damaging the support is considered as EMSR system failure. 

Therefore. failure of EMSR System = C Failure of two or more of the 
instrument ehannelsZ) OR CFailure in safe insertion of three or more 
out of fourteen rodsD . 

The TOP event for the fault— tree of EMSR is defined as. 

FAILURE OF EMSR TO FALL TO THE BOTTOM IN TWO SECONIS AND REST ON 
THE END SUPPORT SP. 

The fault-tree for a single EMSR is shown in fig.A.lFor 
diagnosis purposes using probabilistic techniques.it is necessary 
to have the failure probabilities associated with the basic 
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events. For the present ease, the failure rate data have been taken 
from a-n earlier analysisE] which depends largely on 
WASH-l'dOO. Failure rate corresponding to each basic event is 
tabulated in table 4.1. The AND - OR graph corresponding to the 
fault-tree is shown in fig. 4. 2. 





FaIIuto of EMSli to fall to th® bottom lr\ 2 soo 



fault-trett for Elactromochanlcal Shutdown Rod falluro 
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Am 1 

Data on failure rate or unavailability of Basic Events of 
fault-tree of Electomechanlcal Shutdown Rod. 


Event 

Description 

Failure rate 

el 

shaft £ fails to rotate 

0 .609 

eS 

gears G£ G3 locked 

0.12 

e3 

gears Gi ^ G£ locked 

O. 12 

e3 

shaft 3 fails to rotate 

0. 609 

e5 

rope is stuck in a groove 

not. known 

e6 

shaft 1 fails to rotate 

0. 609 

e7 

shaft 4 fails to rotate 

0. 609 

eS 

shaft 5 fails to rotate 

0. 609 

e9 

instrument channel fails 

1.612 

elO 

shift in instrument channel 

43. 33 


calibr at ion 


ell 

spring SRC a pair 3 fails 

0. 42 


to release 


el 2 

accelerator spring fails 

O. 0241 


to release 


el 3 

support SP breaks 

0.024 

el 4 

rod fails to reach 

not known 


support in £ sec. 


el 5 

testing & maint. of 

1.2 M 10 * 


i ns t r ument channel s 


el 6 

testing of mech. systems 

O. 001 

el 7 

maint. of mech. systems 

2. 138 X 10~® 
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notes - 

C13. Failure rate Ic expreased aa a mean per 10**hr. 

Ca^.No failure rate data is available for events e and e . 

S 14 

4.2 ANNOTATIONS PERTAINING TO AND-OR TREE FOR THE CANDU EMSR. 

T Top Event ; 

B ,s .s and s are the intermediate events. 

Following ia 1.110 aom^Lnl^ic si grtifi canoe of" t.he symbols associat^ed 
with the intermediate events:- 
-4 Rod fails to f*al 1 ; 

-4 Scram signal is not received 
s Instrument channel shift in operation. 

9 

s ^ Rod fails to fall in 2 sec. 

All of them are assumed to have instrumented fault indicators. 

The basic events e and e have not been included in the AHD-OR 

£<f 17 

tree. 

There is no failure rate data corresponding to the basic events 

e and e .To ensure detection of e and e ► X = X = where 

X is the failure rate corresponding to the event with the 
wax 

highest failure rate in the set of all possible events that can be 
considered for probabilistic search. Owing to the extremely high 
failure rate value associated with which is several orders of 

magnitude larger compared to others »it has been instrumented and 
has been linked to an intermediate event viz. s^. It is thus evident 
that if s is tested » then e will not be tested, e^^ will 

S 40 

■therefore., never be considered for probabilistic 

search. Accord! ngly,X = 1.616^0*® hr which is equal to It is 

to be noted that e^^ will not be considered for probabilistic 
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seaircH ssiric^c? i.*L& clfA'Lie' cAiri ci<i&'b6rt]nLlri<i^di b»y i&xAird. ni ng ■Lhif& cLa^'bifip of^ 
s 

4 

. 3. PERTORIitAJNCE ANALYSIS OF THE DIAGNOSIS ALGORITHM FOR THE PRESENT 
CASE. 

From the AND-OR tree it is evident that only discrete 
combinations of intermediate events is possible. Corresponding to 
each of these combinations » two indices M and are defined. M 

represents the number of basic events to be considered in the worst 
case when even low probability faults are to be considered. 
represents the number of basic events comprising the set of most 
probable f aul ts. Hiis is equal to the number of searches when at 
least one fault in the set of all possible faults is found to have 
occurred.lt is to be noted that M represents the number of elements 
in the set of possible faults after the first tier of search and M' 
represents the number of elements in the set of most probable 
faults. 

The indices M and are based on the following assumptions:- 
CiDTime of operation associated with all faults is the same. 

Cii^XT is a small quantity^ where X is the equivalent failure 

Li 

rate associated with the t fault and is the time of operation 
associated with the fault. 

The valid combi nat-i ons of occurrence of "the inbermediat-e event-s 

and corresponding values of M and M* are provided in Table 4. £. The 

formulation put forward in Table 4. £ is valid for the first 

occurrence of the TOP event. Thereafter .the number of searches 

required will be dictated by the faults thei^^ves. But .if the 

CENTRAL 

I ! T ' ' 

OTTTT' 



proba.btlist.ie na.tur® of the faults is assumed to hold then the 
average worst ease will not be much different from this. 


TABLE 4..Z 

Table of valid combinations of intermediate events for 
the fault -tree of CANDU EMSR and corresponding values of 
performance indices. 


SYMPTOMS 

M 


s s 

t 2 

S 

9 

S 

4 



0 0 

0 

0 

0 

0 

0 0 

0 

1 

1 

1 

1 o 

0 

0 

11 

6 

1 0 

0 

1 

11 

6 

1 1 

0 

0 

11 

6 

1 1 

0 

1 

11 

6 

1 1 

1 

0 

11 

6 

1 1 

' 

1 

1 

13 

7 

. 




53 


CHAPTER FIVE 

CASE STUDY TWO- TROUBLE SHOOTING IN IBM PC 

TThiCf dii flLginosi s sLraiLefgy cdcrverl opefci jTor iTauIL dii^i^nostls hi£is fcjis»&ri 
applied for guided trouble-shooting in an IBM PC and can guide 
tests to track component level faults. The knowledge base covers 
double drive IBM PCs though some aspects of the IBM PC XTs are also 
covered by it. Fault trees were constructed for problems related to 
CiD Star ting up 
C i i D Read! ng/Wr i t i ng 
Ciiil) Keyboard problems 

However » the fault trees in none of the cases incorporate human 
errors and errors with coded diagnostic messages which are provided 
by the built in diagnosis software of the PC itself. Another 
important aspect of these fault trees is the fact that data is not 
available for a large number of basic events » but almost all of them 
can be tested to determine their state. The modularisation of the PC 
faults into separate modules makes trouble-shooting easier by 
selecting the appropriate problem areaCe. g Starting 
up»Reading/Wri ting* and Keyboard problems D but at the cost of some 


i nter r el ated i nf or mati on . 
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5.1 DATA TREATMENT FOR TROUBLE SHOOTING THE IBM PC. 


A dia.i./ olT rsi'Lers of i^ajor flLrtdi erlfifct-rroriio 

components has been prepared. Failure rate associated with the fault 

is then computed from the failure rates of the associated 

components. The data is obtained from [£3. 

For any system^if any one family of parts has a failure rate of 

X then the system failure rate will be 
4 


In 

and 


X 

the above expression n^ 
n is the total number 


= £ riX 

a = * ^ ^ 

is the total number of such families 


of components of a family which 


4 

Jeopardize the system.lt is evident that the value of n^ depends on 
system conf iguration. More accurate the value of n^^ more expertly 
the system will diagnose the faults. 

Setting n = 1 VJ^we get the failure rate corresponding to a 


4 

system comprising of one component of each kind. This has an 
advantage as well as a disadvantage. The advantage lies in the fact 
that the system description is very simple and it assumes no 
knowledge about the system configuration. But at the same time much 
of its power to tell apart more probable faults from the less 
probable ones is lost.Thiis a diagnosis based on this simple model 
will fail to distinguish a fault associated with a single resistor 



and a fault- involving a eollaet-ion of raaist-ors! on •the basia of 
probabilities only unless the number of components is specified, The 
interface software designed to build the diagnosis knowledge base 
prompts the user for the number of components and assumes it to be 
unity by default. 

For the present case, diagnosis is done mostly by setting 
n egual to unity as most of the faults are associated with 
individual components at particular locations only. Moreover » during 
the normal operation of a PC the RAM ics are used much 
more. Therefore* failure rates associated with RAM ics is multiplied 
by a factor CIO in the present caseZ) to qualitatively tell apart 
failure of a RAM ic as a more probable fault than others. 

Although* fault -trees have been constructed for all the four 
problem areas mentioned at the beginning of this chapter * analysis 
is done for start up related problems only. The sets of Boolean 
equations describing the cause-effect relationships for other 
problems are also presented. The analysis technique is similar to 
that for start up related problems and therefore is excluded for 
the sake of brevity. 

For building up the cause effect relationship* some diagnosis aids 


avi 1 abl e 


were also considered. 



5.2 FAULT TREE FOR START UP RELATED PROBLEMS IN THE IBM PC AND ITS 


TREATMENT 

Th* fault tre* for atari up related problams in the IBM PC ia ehown 
in fig. 5.1 and the corresponding AND— OR search tree is presented in 
fig. 5. 2. Table 5.1 presents the failure probabilities associated 

with each basic event. The failure rates represent mean failure 

s 

Kr». 

5.3 AMMOTATIONS PERTAINING TO THE AND-OR SEARCH TREE 

T Top Ev€fnt s Failure to turn on and boot up when power Is 
switched on. 

s *s »s are the intermediate events. 

£ M m 

s ^ Power licfht of*!* and no response. 

s Power light is on* but nothing on the screen. 

B ^ Power light is on* but drive will not boot a disk. 

» 

Failure rate data is not available for e *e *e and e . Therefore 

4 €» V H 

A .X ,X and X are each assigned an equivalent failure rate equal 

4 <£ *7 B 

to following the same line of logic presented in Chapter four. 

All other assumptions remain the same as those formulated in 
Chapter four . 



Wsk±Xxsr‘& t,o 








TABLE 5.1 


Data on equivalent failure rate associated with each Basic Event 
In the fault-tree for start up related problems In IBM PC. 


Event 

Description 

Failxire rale 

el 

Power supply failure 

0. 1564 

eS 

5a.d 6334 

O. 0703 

e3 

Bad 8083 

O. 0703 


Bad X-tal 

not known 


Bad Bom 

0. 0703 

e6 

Bad disk 

not known 

e7 

Bad data or disk 

not known 


dislodged 


e3 

cable bad or loose 

not known 

e9 

Bad 74s3S at If 

0. 0025 

elO 

Bad resistor at Be 

0. 0025 

ell 

Bad 741 s86 at 5d 

0. 0703 

el 2 

Bad 741 s74 at Be 

0. 0703 

el 3 

Bad 311 at 5b 

0. 0025 

el A 

Bad 592 at 4a 

0. 0025 • 

el 5 

Bad 733 at 3a 

0. 0025 

el 6 

Bad 741s240 at ul8 

0. 0703 
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5.4, PERFORMANCE ANALYSIS OF THE DIAGNOSIS STRATEGY. 

The vstlid seLs at sympLoms and Lhe values at Lhe indices M and 
M' corresponding to each combination is presented in table 5. S 
The definitions of these indices remain the same as that put 
forward in Chapter f our . Assuming » predicted nature of occurrence of 
faults holds good » the average worst case value of M' will not 
deviate much from the value shown. This f ormulation» again^ is for the 
first occurrence of any fault only. But assuming that probabilistic 
nature of occurrence of faults holds good ► the value of M' for an 
average case will not deviate much from this. 



TABLE 5. a 


Valid sets of symptoms and corresponding values performance Indices 
for start related problems in the IBM PC. 



Hotel- If the symptom s is seen then none of s and s can be 

A 2 SI 

Skt 'th«p fisame However » as seen from *Lhe AND-OR t-reet 

•the symp*toms s and s can occur independently. This is a 

2 2 

consequence of the inability to represent negation.The above 
analysis is based on the AND/OR graph only. 
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5.5 BOOLEAN FORMULATION OF CAUSE-EFFECT RELATIONSHIPS FOR 
FAULTS RELATED TO DRIVE READXWRITE FAILURES IN IBM PC. 

T -♦ Failurcf of" oncr or boi/H bbo drlvos Lo road and.^or Lo write. 
The TOP event is related to the intermediate events by the 
boolean equation T»s 4s 4s 4s 4s 4s 

A 2 fi 4 5 <S 

tha i ri't^rm«?di ate events and the annotations 

i. 2 ft <4 K 4S 

Sir e as T ol 1 ows : — 

s a particular drive does not read. 

s none of the drives read. 

2 

s -♦a particular drive reads but does not wrdte. 

ft 

s both drives read but none of them write. 

4 

fi -4 drives cannot be accessed, 
s 

s -4 Computer locks. 

itS 

The relationship between each of the intermediate events and the 

correspond! ng causes are presented in the following set of boolean 

equations. All the terms appearing on the RHS of these equations are 

basic events and they are annotated separately 

s = eel + ee2 + ee3 + fl + a3 a4 + b5 + c6 + d5 

s = eel ul8 ul© •+■ u20 + u21 + u2£ + uS3 + u£4 ^ u2B + u26 
2 

£ = eel •+ ee4 + eeB + eS + b2 *+ cB 

a 

£ = eel + ee4 + u9 + ul 1 

4 
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s = ee5 + ul2 + ul4 + ul6 + ul7 + u2S 

B 

s * eeS + ee7 + u3 + u6 
a 

The anno-bat,! ons of the basic events are as follows: - 
eel cable bad or loose. 

ee2 -♦ bad head or misalignment. 
ee3 bad or unformatted disk. 
ee4 write-protect switch is bad. 
ee5 analog connectors are corroded 

ee6 keyboard failure. 

ee7 bad RAM chip, 
fl ^ bad 74s3S at If 
e5 bad 221 at 5e 

d5 bad 741s3S6 at 5d 

c5 bad 741 s74 at 5e 

b5 ^ bad 311 at 5b. 

a4 ^ bad 592 at 4a. 

a3 bad 733 at 3a. 

ul8 bad 741s240 at ul8 
ul9 bad 741 si 91 at ul9 
u20 ^ bad MC4024 at u20 
u21 ^ bad MC4024 at u21 
u22 -»■ bad 741 si 12 at u22 
u23 ^ bad 741 si 61 at u23 
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u25 bad 741 si 12 at u25 
u26 ^ bad 741 s02 at u26 
bad 741 si 4 at 2e 
b2 bad 741 e 06 at 2b 
ull bad 741 si 75 at ull 
u3 bad 7438 at uO 
ul7 bad 741s273 at ul7 

ul2 bad 741 so4 at ul2 

u2© bad 741 s02 at u2e 
ul4 <4 bad 741 b 08 at ul4 
ul6 bad 7438 at ul6 
u6 ^ bad 8288 at u6 
u3 bad 8088 at u3 

5.6 BOOLEAN FORMULATION OF CAUSE-EFFECT RELATIONSHIPS FOR FAULTS 
RELATED TO KEYBOARD PRC LEMS IN THE IBM PC. 

T TOP event = Key board error occurs 

The Top event Is related to the intermediate events s >s »s »s 

and s by the bool ean equati on Tas 4s 4s 4s 4s. The 

annot. al i ona IT or & » £ » £ » s and s ar e as f ol 1 ows : - 

1 ft II m 

Signal not reaching the mother board. 

^ No character is being generated. 
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Si No signa.! getting 1.0 *ther dat.a bus. 

9 

^ Keyboard do®*s not r«pspond or prints bad characters, 
c ^ Keyboard stays in upper or lower case. 

Xhe relationship between the intermediate events and the 
corresponding events causing them is represented by the 
following set of boolean equati ons . A1 1 symbols other than those 
used to represent the aforesaid intermediate events are basic 

events. 


s = eel 

i. 

s = eeS 
& 

s = ee3 + u24 + u36 


fi 

=2 + S + S 

4 A S B 

£ s= ee4 + ee5 
n 

Th«f annotation for the baaic events is as follows:- 
eel bad or loose cable. 
ee2 -♦ bad video circuitry. 
ee3 -*■ bad 8048 located inside keyboard 


ee4 ^ sticky key. 

eeS bad Caps lock key. 

u24 ^ bad 741s322 at u24 on system board 
u36 ^ bad 82B5 at u36 on system board 



Notez - 
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CiD For the last two cases. the eodina of ^ 

-^oaing or symbols for basic events 

haia h&&n done in such & wav 

» » way that they point tn the location of the 

fault. Thlc IB for ease of comprehension. 

CiiDThe locational details uc*rt 

used for diagnostic messages are 

valid for IBM PC circuit boards only. 

tllllFor Keyboard related problems . Internal faults In the Keyboard 
has not been considered as the keyboard Is a third party product 
for an IBM PC and hence there are different types of keyboards 


available. 
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CHAPTER SIX 
C<»ICLUSIONS 

The Diagnosis strategy has been tested using the Fault-trees for 
the CANDU EMSR and for START UP related problems in an IBM 
psersonal computer. For testing the EMSR system. the simulator has 
been used and for testing START UP problems. an IBM PC/XT with known 
fault has been used. 

6.1 RESULTS OF CASE STUDY- ONE AND DISCUSSION. 

Faults were simulated using the simulator developed for 
electromechanical systems and using the principles of simulation 
described in Chapter two. In computing the values associated with 
the Intermediate events.a single EMSR is considered and for 
computing the neutron population at different instants the entire 
EMSR system has been considered. For a 225 MWe CANDU nuclear 
reactor . fi g . G. 1 and G. 2 depict the change in observed values from 
the normal to the faulty state when the fault eCshaft 2 locked in 
bearings — fig. 4. 12)occurs at t = 1 sec after the scram signal has 
been received. The time base for this plot is provided by the 
simulator clock and while computing the neutron p»opulation. the 
outage of a single rod is considered at t =1 see. It is to be 
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remembered that ►outage of a single EMSK does not produce a failure 
for the entire system and hence the plots only serve to show 
qualitatively the difference between normal and faulted states. 

In order to test the effectiveness of the diagnosis strategy a 
series of faults which produce the same combination of symptoms 
were simulated and diagnosis was made. In all these cases, only a 
single EMSR has been considered. Table 6.1 shows a listing of faults 
si mul ated , the time at which they occurred, the symptoms visible and 
the number of queries made by the user for the status of the basic 
events considered. The time here refers to the age of the system. 

TABLE 6.1 

Performance of diagnosis strategy for CAKDU EMSR 


Event • 

TimeChr . 2) 

S>nnptonkS 

Nuin^rer 




of queries 

el 

lOOOO 

s only 

i 

6 

j 

3000 

St only 

1 

5 

el 

- 

3000 

only 

5 

i: 


The basic events tested in the first ease were el , e4 ,e5, e6, e7 and 
eB.The basic events tested in the second ease were 
e4,e5,e6,e7,eS. The basic events tested in the third case were 


el,e5,e6,e7 and e8. 
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It iB thus; B»®n that th» formulation in ehaptar four holds good for 
the present system and the search trajectory conforms to expected 
ones . I t is evident that the strategy is intelligent enough to 
select the most probable of all the possible faults and also uses 
the fact that once a fault has occur red* the probability of 
occurrence of the fault in near future is actually much lower 
assuming that the fault is repaired once it is detected. Ihus* though 
the symptoms point to event el in the first ease, as well as in the 
second, event el is not tested in the second case after its 
detection in the first. 

The symptom table gives a listing of the intermediate events 
vd^ieh have been detected. A further assumption in each case is that 
TOP event has occurred, which is off course quite obvious. 


For a description of the events el and e4 and the Intermediate 
event s^, the annotations pertaining to the AND - OR tree of fig 
4.3 is to be considered. 

6.2. RESULTS OF CASE STUDY-TWO AND DISCUSSION: 

For testing the diagnosis strategy for the problems related to 
IBM personal computer, a IBM compatible PC/'OfT was chosen and only 
start up problems were considered The PC/0£T selected was one which 
had a problem with power supply only. The reason behind doing this is 
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f* Act# "LHAt./ ‘LHa f^Aul t / aa f^or 'LKa cLArt/ up pr obrlAms Has i2>AAn 
di#?v<Al opCfci for A diotibul (A drivA XBM PC Atid slncA ift o lrHAr 

boArds for bo'th IBM PC And PC/0(T AriA idAnt.icAl»A lArgA subfiAt# of 
common dAf^ctsa And eorr ©spending diAgnosis messages exist.s.The 
fault. WAS restricted to power supply problems* because of the 
fact that most of the diagnostic messages involved component 
location level details for the IBM PC whereas the computers 
available for testing were only IBM compatible ones with different 
locational demarcations for the components on the respective 
boards- 

Table 6. £ is a formulation showing the symptoms visible for the 
fault considered and the failure considered and the number of 
queries The symbols used conform to the fault -tree presented in 
Chapter f i ve . 

TABLE 6.£ 

Performance of diagnosis strategy for Start up problems of the IBM 
PC. 


Event 

SymptoiRS 

_ 

Number 



of queries. 

e 

s 

0 

£ 

£ 

j 
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Not.et — 

-*■ Power supply failure. 

Povrtsr light, on and no response. 

It is to be noted that fault -trees were also considered for other 
problems associated with the IBM personal computer viz. problems 
related to read/hw^ite failures, keyboard problems for the IBM 
personal computer . However .since most of these are third fsarty 
products, the locational details of the components on their .aards 
vary greatly but the fault-tree remains more or less the same. So 
the same database can be used for other systems by altering the 
diagnostic messages. Furthermore, detection of component level faults 
requires using the developed diagnosis strategy requires testing of 
faulty components during the search and locational details are 
very useful for this purpose. 

6. 3. SUGGESTED METHODS OF IMPROVEMENT AND SCOPE FOR FURTHER WORK. 

The principal difficulty encountered in applying the diagnosis 
strategy in certain cases is the lack of proper reliability 
data. For exampl e , whi 1 e applying diagnosis strategy for fault 
diagnosis in electronic systems, the interface asks only for the 
components associated with a particular fault and computes the 
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equivalent failure rate uaing this in an overeimplif ied inanner 
assuming one component for each family in the composition of the 
subsystem associated with the fault unless otherwise stated by the 
user. Rarely is failure rate data available for all the basic events 
associat«rd with any fault --tree. 

This problem can be tackled in two ways. In the first case»the 
reliability data can be obtained by rigorously computing the 
failure rate associated with each basic event and then entering the 
failure rate directly instead of the present way of representation 
of the reliability data. For this purpose synthetic tree model 
as followed in the fault— tree construction code W 5 !AFTC 63 can be 
applied and and component failure transfer functions may be used. 

Another alternative is knowledge modification using learning 
methods. Heuristi cal ly* one can argue that if one particular 
component fails often and it is not tested while considering the 
most probable faults* then obviously its probability of occurrence 
is under projected and if it fails less often but is considered as 
a probable fault often* then its probability of occurrence is over 
projected. Thus individual a priori probability for all basic events 
E.« E may be assumed to have a Coefficient C^ which can be adjusted 
suitably e. g if the faulb occurs often but it is not included as 
in the set of probable f’aults*then the value of the Coefficient 
associated with its a priori probability should be incremented and 
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vice verBa.ThiB approach has been followed in the case of Chess 
playing programs. The suitable equilibrium values and equilibrium 
states will involve quantification of the search and once 
equilibrium is reached, further modification of the value of a 
particular component may be stopped. 

Extension of the present work may be done in the following 
directions involving diagnosis on both simulated and actual 
systems: - 

CiD Modification of the search strategy for tackling AND terms. 

Cii^ Development of a simulator for periodic forcing functions based 
on the present formulations. 

CiilD Development of a parallel computer simulation algorithm for 
systems involving both feedback and feed-forward links. 

CivD Development of a multi computer on line supervisory system 
for on line fault monitoring in large systems. 

The present search strategy cannot tackle the AND terms 
efficiently. Modification is contemplated in this direction. And 
terms will require some extra predicates for their representation. 

It is evident that if each 's' in the transfer function of a 
system is replaced by ' j'w' ,then the frequency domain transfer 
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function is obtainedCatessuming purely Binuaoidal functions^ . Treating 
each transmittance term as a complex quantity rather than a real 
number, the present simulation algorithm can be extended to 
sinusoidal periodic forcing functions of known frequencies. 

Since feedback and feed-forward path computations can be done 
independently, a parallel algorithm can be formulated for fast 
simulation in cases where the system transmi ttances are time 
variant ones. 

For detection of faults in a large system, fast on-line monitoring 
can be done by using deductive and probabilistic analysis by a 
number of computers sharing information each being entrusted with a 
particular job. 



normal 
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ERKATA 

1 Pag® 3,S®ct,ion 1.2,lin® 4 - should b® r®ad as ‘sxists’ 

2. Pag® 4 ,S®ction 1 . 3 ,l®at, line - ‘fault tree* should be read as 
•ANI>-OR search tree* 

3 Page 7,lirie 6 - ‘dedicate* should be read as ‘dedicated*. 

4.Page 11 . line 2- ‘XCO = ‘ should be read as ‘XCt:>=U_^Ct5 ‘ 

B.Page 13. line O - ‘P* should be read as *P^‘ 

6 Page IB. line 1 - ‘associated at* should be read as * assoei ated 

7. Page 22. section 2. 4. line 16-*fourth node represents* should be 
read as *fifth and Ei>cth represent*. 

8. Pag® 23. line lO- ‘cot rollers* should be read as ‘controllers*. 
O.Page 26. section 2 . B. line 20 - *this* should be read as *these*. 

10 Pag® 3B.line lO - should be read as . 
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APPENDIX - I 

DEVELOPMENT CERTAINTY FACTCtfl FRCM ORIGINAL MYCIN MOI^L. 

According Lo MYCIN Ca medical diagnosis progranO a hypsoLhesis 
■that, a particular disease has occurred when certain evidence is 
seen is associated with two measuresta measure of belief and a 
measure of disbelief denoted by MBth»e] and MD[h,e3 respectively 
where *e* is any evidence and *h* is any hypothesis which can be 
drawn from *e* with a certain probability. The belief and disbelief 
measures are defined as: - 

MBCh.e] = 1 if PCh:> = 1 

iMaxCPCh|e3»PCh5 3 - PCh:5 

else MB[h,e3 = 

maxCl.O] - PCW 
and MD[h*e3 = 1 if PCh5 = O 

min£PCh|e3»PChD3 - PChD 

else MDCh,e3 = 

minC1.03 - PChD 

where PChjeD is the probability that the hypothesis *^h* is true 
gi ven evi dence * e * . 

The first term states that if the a priori probability that *h' 
is ICin which case it is known to occurs or the evidences found in 
its favor indicate a probability higher than its a priori 
probability, then there is a reason to believe that the hypothesis 
•h» is true. 

The second term states that if *h* is known never to occur or if 
the evidence found in its favor indicate a probability lower than 



t,h® & priori probability of *h’ , thor* thoro is roason to bali*v* 
that *h* is not true. 

Thus if PChje3 > PCh!) then MBth.e] > O & MDCh^eJ = O. Likewise, if 
PChje) < PCh>,then MBCh.el = 0 & MDCh.e] > O. 

On the basis of these measures of belief and disbelief, a 
certainty factorCC.FD is defined as follows: - 

C.F = MBCh,e3 - MD[H,e] 

Thus, C.F > O if PCh|e> > PCW ; 

C.F < O if PChje5 < PChD; 

C. F = O if PChje:> = PCh5. 

If the C.F for a particular hypothesis is greater than 0,then the 
hypothesis is accepted according to the MYCIN model. 

For the present case, , since negations are not Involved, a 
particular symptom can only point to a fault with a certain 
probability only and as such only the first termCi.e MBC h,e3!>need 
be computed. The measure of disbelief need not be computed iri this 
case and eliminations are based on deductive reasoning only. 

The term PChD in the original MYCIN model denotes the a priori 
probability of the hypothesis to be true and there is a qualitrative 
relationship between the a priori probability of a particular 
hypothesis to be true and the probability of it to be true as 
suggested by the evidences in the sense that a particular 
hypothesis having a higher a priori probability associated with it 



will hAv«r a Bizabla probability auggastad by the evi dences » when it 
occurs. However » in the present case or a set of* symptoms » a Tault 
may only be considered as a probable one or its state may be 
deduced with certainty and the symptoms neither have any 
quantitative nor any qualitative relationship with the actual a 
priori probability of occurrence of the fault. They merely define 
the fault as a member or a non member of the set of probable 

faults. The term PChD in the original expression for measure of 
belief is replaced by a probability PCe^!> = 1/n where n is the 

number of elements in the set of probable faults obtained after the 
first tier of search based on deductive reasoning. The probability 
term PCe.D » therefore assumes that all the faults in the aforesaid 

I. 

faults are equally probable and denotes an average value. 

The term PChje!!) can be replaced by the term PCe^jTZ> to indicate 
the probability of occurrence of a faultCi.e a basic events e^ 

relative to other basic events in the set of probable faults E^when 
the TOP event occurs » Cnot known definitely!) when the TOP event 
occurs and is accompanied by the occurrence of a set of 

symptoms .The term PCTje^D is computed in the following manner. 

Let PCe !> =1 - expC-XTZ) denote the actual probability of 

id i. 1. 

occurrence of a fault where X denotes the equivalent failure rate 

V 

associated with the faultC basic events) e. and T is the time of 

t. 1. 

operation for the components assuming the components to be fresh.lt 
is to be noted that once a fault is detected and the faulty 
conrponents are replaced or repaired, they are supprosed to start a 
fresh life. 

After confuting the value of PCe^D , the next step is to see how 
it compares with the corresponding probability values for the other 
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probabl* fa.ultfi.Thia isi aehiavad through normalization and PCa^jT:) 
than indioatafi tha probability valua aasociatad with tha fault a 

i 

t/O ot^httrs in \,h,& csf" proba.bl& Norma^liz^d 

pnobflLbili'ty FCi>^jT2) can be obb&ined using t^he rela'tion below:- 

n 

PCe. m = PCe3 / C r PCe3 :> 

V « of 1 43. 

J 

and the corresponding certainty factor is defined as 

C.FCe ITD = PCe ITD - PCe !> 

I. • x.* i 

All faults with C. F ^ O are classed as Tnore probable faults and 
f aul ts with C.F < O are 1 ess pr obabl e f aul t s .It is evi dent that the 
more probable faults have a relative probability more than the 
average value and the less probable faults have a value less than 
the average. 

From the discussions made so far two things become evident. These 
are: - 

Sr 

Ci3 In a set of all probable faults no matter what the individual a 
priori probability values for the probable faults be » only the most 
probable ones amongst those are selected. 

CiiD As the time of operation associated with a fault 
i ncr eases » wi t hout the f aul t oc cur r i ng » the a pr i or i pr obabi 1 i t y of 
that f aul t i ncr eases . Thi s i ndi cates » that f or the same set of 
symptoms » the certainty factor associated with the fault increases 
with time. In other wordstthe fault becomes increasingly likely for 
the same set of symptoms. 
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KUNMING THE SOFTWAKE 

A. K.l. RUNNING THE SIMULAT<». 

To run the ssimulator one has to run the SIMUL.EXE Tile. This is 
the stand alone version of the simulator software and can bse used 
to simulate electromechanical systems.lt is a menu— driven software 
and the main menu permits the following modes: — 

ci:>. Build 
Cai.Edit 
Cai.Run 
CA:>. Fault 
C53.Quit 

Selection in the main— menu is done by hitting the space bar C this 
places the selector at the appropriate choice!) and pressing the 
letter *s* or * S’. Pressing the space-bar after the selector is 
placed at the 5^^ menu itemCi.e Quits resets the position of the 
selector to the position of the first menu item i.e Build. 

Each item in the main menu has a sub-menu associated with it. The 

/ 

Build sub-menu consists of the following items: - 

CaS Build a new system 
CbS Insert an already created system 
Using the first option* an electromechanical system can be 
built. The simulator provides an extremely user friendly interface 
:^or building a system. As soon as the Build option is selected, four 
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windows spposr on tho scroon. Th« largost, of 'thoso four Is t-h* 
canvas. The extreme right window shows the menu of the forward path 
componentsCseriesD that can be simulated. The bottom-most window is 
the dialogue window and it guides the user during the building 
process.lt also takes inputs from the user in the graphics modeCi.e 
during bui 1 di ng!> . The selection of an appropriate location on the 
canvas is done by moving the location selectorCa small white 
circled in the canvas. The selector movement commands are» *h* for 
moving left.'J* for moving downwards» * for moving upwards and *1* 
for moving right. To build a particular component , one has to take the 
locator to an appropriate location on the canvas» press any key 
other than the aforesaid four to inhibit the locator movement 
routines and then press the appropriate key as directed by the 
menu window. Tliis builds the sub graph correspjonding to the item 
chosen. The user is prompted to type in the values of the required 
p>arametersClike armature resistance for a motor or gear ratio for 
a gearD by the dialogue window.lt is to be noted that in the 
building mode» all the parametersCbe real or integer!) are read in 
as a 6 character string and is converted to an integer or real as 
required by the particular case. The next step is numbering of the 
items built. This process establishes the connectivity between the 
individual sub graphs and builds the signal flow graph for the 
above system. This is again, to be fed in by the user through the 
dialogue window and each is a two character string. The numbering 
routine automatically indicates the number of which component it 
wants. 

The build routine then asks the user whether 
feed-back /feed-forward paths need be built. The answer is *y* for 



y«ps and *n* for no. I't may ba mant.iona>d ba?ra “that, all 'th« f«fd— back 
and f aad-f orward palhs within any particular series path component 
are tackled when that component is built. If the user responds with 
an ^yes^ to the above query^the menu window shows him which key to 
press for beginning a feed-back /feed -for ward path and which key to 
press to terminate it. To initiate a feed back from one particular 
component * the user has to take the locator to the appropriate 
component » pi ace it in within the circular zone marked theret inhibit 
the locator movement and press *b* or *B*.To terminate the 
feed-back he has to take the locator to the appropriate component 
and follow it up with identical actions except that he has to press 
the key *s* or to select the termination pwuint . EJuring the 

process of selectionCboth during feeding in and feeding outD the 
message windowC right downD shows which component is being selected 
and the dialogue window states what can be fed out or fed in. If a 
valid feed-back or feed forward path is formed»the dialogue window 
asks for the value of the path transmittance associated with 
it. Invalid paths are automatically taken care of. At this stage 
after entering the path transmittance if the user wishes to cpme 
out of this path building routine he simply press to terminate 

the process* anything else returns the control to the path builder 
routine. This routine is followed by two other routines which are 
invoked if the user so desires viz. the routine for building timer 
relays and associating it with contactors and the routine involving 
the nuclear interface for the si mul ator . Al 1 these routines are 
guided by detailed instructions through the dialogue window and is 
therefore left out for the sake of brevity. The locator movement and 
the sesiection routines remain the same in all cases. 



The most. import^anL part, or building pr occfss is t.he r outline 

involving templating. The user is first asked to enter the name of 
the file where this template details will be stored. The user has to 
start first with the intermediate events and select the appropriate 
channel C a particular node in the graphs and mention whether he 
wants instrumentation for that or not. If he does require an 
i ns tr ument at i on » 1 1 is r ecor ded * compar ed wi t h the nor mal val ue and 
messages are sent. The user has to repeat the same process for the 
basic events and for the TOP event.lt may be noted that for 
ascertaining the occurrence of the an intermediate event nodal 
values are cobsidered and for ascertaining the occurrence of basic 
events* the corresponding branch transmi ttances are considered. 

After the construction part is over* the user is asked if he 
wants to save the system. If he does* he has to enter the name of 
the dosfileCwith full drive and directory specif icationZ> without 
any extension and the system details are stored there. 

The build option also pnermits the user to import an already build 
system in the work area. In order to import the system* the user 
again has to type in the filename in the same way as he does while 
saving. 

The Edit option of the main menu permits the user to edit an 
imported system. This option can be used to edit series 
component * feed-back x^feed-'f or ward components * timer relays and 
attributes associated with the nuclear interface. The process is 
done in the text mode and the user is provided with instructions at 
every stage. The principal edit codes available are ^a* meaning 
append , * d * meani ng del et e * * c meani ng change and * q * mean! ng qui t 
edit mode for that particular group of components. 



Th& Run opt-ion c&n be selected for e norma.! case and also for a 
an abnormal case. For normal case» the Run option simulates the 
system responseC after linearization* when required^ displays the 
results of some selected nodesCto be selected by the user]>.lt also 
keeps record of the normal values associated with all the 
intermediate events and the TOP event. These values are stored in a 
file desi gnated by the user . The user has to i nput the i ni t i al and 
final values of the input signal* the type of function he wants* the 
time-step required for computation and the total time of run. The 
timer routine associated with the Run module keeps track of the 
simulated time and displays it. 

The Fault option involves several sub options involving the 
creation*import* saving* editing and running of the faulted systems. A 
library of routines for these faults have been created covering all 
the series and feed-back* feed-forward path and nuclear interface 
components and the user has to sp^ecify the codeCa two character 
string!) for the fault concerned* the particular component* and the 
timeCw. r.t the simulator clocks at which he wants the fault to 
occur. The routines involving building, editing* saving and retrieving 
of faulted system details are supported by detailed 
i ns tr uct i ons . However * the Run modul e for f aul t mode i nvol ves spjeci al 
consideration. 1 1 now not only computes the system resp>onse, but 
also compares the values with the normal ones and generates a 
repwDrtC report filename to be provided by the user!) stating which 
are the nodes* and^^or branches at which it has found changes. 

The simulator output has now got to be interfaced with the 
diagnosis soft aware. This is done by a batch file •SETTUP^ which 
contains a number of filesCS actual ly5 which do the decision 





inAking* UftA'tch ■thA chAng«pd pArAnM^-tA-rs wi’th fault tamplAt<> for 


the system 

and tel 1 the 

user 

which 

of 

the 

i nter medi ate 

eventsC havi ng 

1 nsttr umentati otO 

have 

occurred. It 

al so 

mai ntai ns a 

' tel 1 er ' wi ndow whi ch can be 

accessed by 

the 

user 

to know the 


status of any othor basic or intermediate event -The format of 
setting up the interface is ^Settup< report /ilemjtme> < template 
fi lenceme> . 

A. 2. 2. BUILDING THE KNOWLEDGE BASE FOR DIAGNOSIS. 

This involves telling the diagnosis software what are the 
intermediate events » what are the br.sic events > what are the failure 
rates associated with each compoiient or what are the components 
associated with each basic event and what are the causal relation 
ships between the intermediate events and the corresp^onding basic 
events- This is performed in steps and each step is accompanied by 
detailed instructions. For calculating the equivalent failure rates 
associated with each basic event the failure rate data of soisr^ of 
the components is incor prorated in a databaseC * MAST. DAT *‘D which must 
remain in the same directory as the interface software. The database 
has been prepared using [23 and [S3 -For preparing the interface^ the 
command format is ^INTERFC</i lenome > where /ilenome is the name of 
the family of files which store the knowledge base. The knowledge 
base is stored in 6 files of the form /i lenctyfte. 
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A. 2. 3. RUNNING THE DIAGNOSIS S(»^TWARE. 


For running Ihe dlagnossls fiof'twa.ro» th* batchf'lle DIAG Is bo be 
Invoked. The format is DI AG</t leno 7 ne> where /tleTwone is the same as 
that used while interfacing. The diagnosis software is based on the 
algorithm outlined in chapter three and is accomplished in steps.lt 
also records the components which are being replaced and at what 
time for future reference. The process is highly user interactive and 
every step is provided with accompanying messages. 

Originally it was contemplated to run the simulator ►the setting 
up software and the diagnosis software on the same computer using 
standard software packages like MS Windows. However » this is not 
being done for the present version of the software and the entire 
software has to run on two computers, the setting up software on 
one and the di agnosi s on the other . Br i dgi ng of the two has not 


been done. 
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